Skill UI

This comprehensive pre-upload audit guide ensures submissions meet the strict technical and anonymity requirements for UAI OpenReview. It covers critical aspects like the 8-page main body constraint, combining all content into a single PDF, handling file size caps (15MB/50MB), and performing an identity sweep to maintain double-blind review standards.

This guide helps researchers determine the optimal venue for their Computer Vision paper, specifically addressing the unique identity of WACV (Applications-first) versus major conferences like CVPR, ICCV, and ECCV. It guides authors on whether their contribution is driven by real-world applications/constraints or by advancing core algorithms, and how to choose between the Applications or Algorithms track within WACV.

This skill reports the overall integration and configuration status of the AGNTCY ecosystem, covering several critical areas. It verifies package availability (TS/Rust), determines the active communication transport (local or SLIM), checks the CASA enforcement state, and reports on IOC coordination and identity observability features. Use when troubleshooting or confirming system setup.

This specialized skill is designed for deep forensic analysis in complex Windows environments, crucial for CTF and red teaming. It traces identity flows, including Active Directory (AD) origins, Kerberos ticket lifecycles, and OAuth authorization claims. Use it to correlate host artifacts (LSA, DPAPI, Sysmon) with identity evidence to map complete lateral movement and privilege escalation chains.

A specialized downstream skill for deep security analysis of JSON Web Tokens (JWT), JWS, and JWE. It guides the identification of vulnerabilities where token components (headers, claims, keying) lead to unauthorized identity assumption or privilege escalation. Use this to trace the full path from token supply to final application acceptance.

This specialized skill is designed to trace and prove the complete flow of OAuth or OIDC authentication, acting as a downstream specialization after an orchestrator has established sandbox assumptions. It meticulously tracks the entire journey—from initial redirect and parameter handling (state, nonce, PKCE) through token exchange, claim mapping, and ultimately to the point where an identity or privilege is accepted by the backend service. Use this when the critical task is proving the security and mechanics of the authentication chain.

This specialized skill is designed to analyze complex security flaws involving forced authentication (coercion) and identity relay chains. It guides users to trace and document the complete, minimal path from the initial coercion trigger (e.g., a specific service or protocol edge) through intermediate hops, to the final service that accepts the relayed credentials. Use this for deep security research, forensics, and documenting the decisive sequence leading to privilege escalation or code execution.

A comprehensive security assessment skill for identifying vulnerabilities in federated identity systems, including SAML, OIDC, and OAuth 2.0 flows. It covers common misconfigurations, such as signature tampering, PKCE failures, redirect URI issues, and token confusion, ensuring robust SSO implementation.

This tool analyzes your entire codebase, assessing project identity, team size, test maturity, and existing architectural signals. It then recommends the most appropriate, AI-assisted development methodology stack (e.g., Microservices, Enterprise-Gov) and asks targeted questions to refine the plan, providing a concrete quick start guide.